CNNVD-202507-3412 Information

Jul 27, 2025 cve

CNNVD ID

CNNVD-202507-3412

CVE-2025-8226

CNNVD Published: 2025-07-27

Description (Chinese)

ChanCMS是中国yanyutao0402个人开发者的一个内容管理系统。 ChanCMS 3.1.2及之前版本存在访问控制错误漏洞，该漏洞源于文件/sysApp/find中参数accessKey/secretKey的错误操作导致信息泄露。

Description (English)

ChanCMS is a content management system for the yanyutao0402 individual developers in China. ChanCMS 3.1.2 and previous versions have access control bugs, which stem from the error of the argument AccessKey/secretKey in file/sysApp/find, resulting in the leak of information.

Hazard Level

High

Vulnerability Type

访问控制错误

Affected Vendor

个人开发者

Published

2025-07-27

Last Modified

2026-02-24

References

https://gitee.com/yanyutao0402/ChanCMS/issues/ICLP9V https://vuldb.com/?id.317814 https://vuldb.com/?ctiid.317814 https://vuldb.com/?submit.622167 https://access.redhat.com/security/cve/cve-2025-8226 https://nvd.nist.gov/vuln/detail/CVE-2025-8226

Patch

https://gitee.com/yanyutao0402/ChanCMS/releases/tag/V3.1.3

Share on: